Files
CVEs-PoC/2025/CVE-2025-5034.md
T
2025-09-29 21:09:30 +02:00

717 B

CVE-2025-5034

Description

The wp-file-download WordPress plugin before 6.2.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

POC

Reference

Github

No PoCs found on GitHub currently.